What does the GDPR mean for our students? How does NHL Stenden deal with your data? And what rights do you have? And what do you need to do if you process personal data as a student or trainee, for example, during your internship or in the research you do for your bachelor thesis? Want to know more? Watch our flash lecture GDPR: What to do with it? or read further.
You have the right to information. You have the right to know what personal data are processed, and with what purpose. NHL Stenden University of Applied Sciences has created a data register for every target group. You can find the data register for students via datacare.nhlstenden.com.
You have the right to access your personal data. It starts with the data register. In many cases, access is automatically. You can check which of your personal data are in the student tracking system (Progress) yourself. In addition, you can, for example, request access to your student file. If appropriate, you also have the right to a copy of these data.
You have the right to rectification. If the personal data that NHL Stenden University of Applied Sciences has on you are incorrect, you have the right to obtain rectification. For example, if your name is displayed incorrectly, or when your name has changed because you got married during your study. Or whenever a modified grade is still displayed incorrectly in Progress.
You have the right to erasure. If your personal data are no longer necessary for the purposes for which they were collected, you have the right to erasure. If, for example, there’s still information about you on the intranet or the internet sites of NHL Stenden after you’ve graduated, the university has to delete these data if you request so. Or, if you have given us permission to use your picture on the internet, but want to revoke your permission, the university is required to delete your picture.
You have the right to limit processing. In some cases, you can place a ‘temporary lock’ on the processing of your personal data. If you don’t want the university to pass on your personal data to the NSS (National Student Survey), for example. Or if you object to your picture being used on a Facebook page of your study programme.
You have the right to data portability. This means that you may transfer the personal data NHL Stenden has on you in certain circumstances, for example to another university of applied sciences. But this is only possible if you have given your explicit consent for the processing, or whenever there’s an agreement in place. When you log in to Exchange, you accept the agreement that’s in place there. In this case, you have the right to transfer all information on that exchange (including courses and results, and so on) to another educational institution.
You have the right to object. In many cases, NHL Stenden University of Applied Sciences processes your personal data to be able to function properly. In cases where NHL Stenden invokes this so-called ‘legitimate interest’, you have the right to object to the processing – if you have legitimate grounds to do so. Your address and phone number are, for example, used throughout the institution by different departments. In case you’re being stalked, you could object to this. You may object to direct marketing at all times.
You have the right not to be subject to automated decision-making. Decisions regarding yourself, have to be made by people, not computers. Here, the law is referring to the ever-advancing algorithms (complex computer decision models). We never do this at NHL Stenden. If you doubt this, please contact the data protection officer via firstname.lastname@example.org.